p4b3l1t0 Goto Github PK

acmebanksecured

Securing a Node app

apex_extractor

This script analyzes JavaScript files from Salesforce applications, extracting aura:// and apex:// controller URLs for penetration testing. It outputs these findings to object.txt, aiding in identifying security testing points in Salesforce.

bitb

Browser In The Browser (BITB) Templates

bored_api_frontend

Just a simple frontend app to parse API fetchs

confusploit

This is a python script that can be used with Shodan CLI to mass hunting Confluence Servers vulnerable to CVE-2022-26134

devsecops

A repo for testing and demonstration purposes.

echo.github.io

endpointdiscover

endpointdiscover is a Python-based tool developed to aid in the discovery of API endpoints hidden within JavaScript files of a web application

fastapi1

A simple FastAPI app to create, get, delete, and update tasks

favihash

It's a script to find assets using favicon.ico

fixed-damn-vulnerable-restaurant-api-game

Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

github-dorks

The repository contains useful GitHub dorks for finding open-source vulnerabilities.

go-simplerest-proj

Go REST API CRUD Simple Project

grep_history

Grep history of the terminal

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

joern-cheatsheet

A simple repo with different joern queries and function to find vulnerabilities in different languages (C, C++, Javascript, Java, Python, PHP, Go, Kotlin, Swift, C+ & x86/x64 )

just-another-vulnerable-java-application

nodegoat-hardening

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

owasearch

Tool for searching OWA over a domain list

porty

scan ports using bash

secure-code-review-checklist

simple_searcher

"simple_searcher" es una herramienta de detección de vulnerabilidades que busca patrones de código malicioso en archivos de código fuente para mejorar la seguridad del software

spf_nslookup

Spiderfoot module to execute nslookup and obtain an IP associated to a specific domain

ssti-java-injection

Un script hecho en python para explotar Las vulnerabilidades de SSTI (Server Side Template Injection) en plantillas JAVA.

testxss